CVE-2021-36613

Name of the Vulnerable Software and Affected Versions Mikrotik RouterOs versions prior to 6.48.2

Description The issue is a memory corruption vulnerability in the ptp process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference).

Recommendations For versions prior to 6.48.2, update to stable version 6.48.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the ptp process to minimize the risk of exploitation.